Blog
Guardians of the Files: Tracing the Evolution of File Integrity Monitoring
By Kelsey Arhart on Mon, 09/02/2024
File Integrity Monitoring (FIM) is a cybersecurity process that involves continuously monitoring files and systems to identify any unauthorized changes. FIM solutions maintain file integrity by comparing a file or system's current state to a known, trusted baseline and flagging any discrepancies. It is key for identifying security breaches, preventing data tampering, and maintaining compliance...
On-Demand Webinar
Breaking Compliance Into Bite-Sized Portions
Tue, 04/23/2024
Which standards and regulations do you need to comply with? Most organizations have to prove compliance with multiple standards simultaneously to keep their systems secure and avoid audit fines. But it can be difficult to keep up with changing regulations, achieve continuous compliance, or even know where to start.This on-demand webinar presented by Fortra's Tripwire is designed to equip you with...
Blog
Measuring the Effectiveness of File Integrity Monitoring Tools
By Mark Conway on Tue, 05/28/2024
A security incident can be the result of a single unauthorised change. A few may say, 'one change is inconsequential, don't sweat the small stuff.' But when it comes to infrastructure security, the detail is of paramount importance! Just a single edit to a single line item can have a negative effect on an entire file or operating system. It's...
On-Demand Webinar
PCI 4.0 is Here: Your Guide to Navigating Compliance Success
Mon, 06/03/2024
The transition period from PCI DSS 3.2.1 to 4.0 ended on March 31, 2024, a date toward which many organizations have dedicated countless hours of preparation. Looking back on that time, do you know where your compliance efforts stand now?
Watch PCI experts Steven Sletten and Jeff Hall in this on-demand webinar PCI 4.0 is Here: Your Guide to Navigating Compliance Success to learn how to...
Blog
Financial Institutions in New York Face Stricter Cybersecurity Rules
By Katrina Thompson on Wed, 11/15/2023
Boards of directors need to maintain an appropriate level of cyber expertise, incidents must be reported within 72 hours after determination, and all ransom payments made must be reported within a day.
Those are just some of the changes made by The New York State Department of Financial Services to its Cybersecurity Requirements for Financial...
Blog
Guarding the Grid: Navigating the Current and Future Landscape of Utility Cybersecurity
By Travis Emerson on Mon, 11/27/2023
Tripwire recently held its annual Energy and NERC Compliance Working Group. This year's attendees included more than 200 Tripwire customer utility personnel representing over 80 different registered entities from all across the US and Canada. The company sizes ranged from public utility districts and city municipalities to medium and larger-sized...
Blog
Monitoring Your Files for Security and Compliance
By John Salmi on Tue, 10/01/2024
Have you ever stopped to consider all of the components that comprise a working automobile? Even a cursory examination reveals more parts than might be considered when we turn the ignition key. However, many of these components are useless when detached from the full product. A steering wheel without a car is not exactly an efficient mode of transportation.However, when multiple entities work...
Blog
5 Things to Learn About COBIT
By John Salmi on Mon, 10/28/2024
You can’t do large-scale business in 2024 without having a successful, well-run IT infrastructure. Arguably, it’s difficult to do any sort of business well (large or small) without tuning your IT capabilities to your business objectives. This allows them to work as one, not against each other.COBIT is a framework created by ISACA (International Systems Audit and Control Association) to do this...
Blog
What's New with the TSA’s Oil and Gas Security Directives?
By Michael Betti on Tue, 10/29/2024
In recent years, the security of the United States' critical infrastructure has become a pressing concern, particularly in the oil and gas sector, due to its pivotal role in the nation's economy and energy supply. Recognizing this, the Transportation Security Administration (TSA) implements several new directives in July each year aimed at enhancing the security and resilience of vital energy...
Demo
Fortra’s Tripwire for SOX Compliance
Tripwire: A Trusted Leader in SOX Compliance Automation The Sarbanes-Oxley Act requires that publicly held companies use internal controls for financial reporting. This mandate is incredibly difficult to meet using manual efforts, and Tripwire is here to help you automate SOX compliance — along with your other compliance requirements — to save your organization untold hours of work and costs...
Blog
The Past, Present, and Future of File Integrity Monitoring
By Amir Gerges on Tue, 10/22/2024
Also known as change monitoring, File Integrity Monitoring (FIM) solutions monitor and detect file changes that could indicate a cyberattack. They determine if and when files change, who changed them, and what can be done to restore files if those changes are unauthorized. As such, FIM solutions are useful for detecting malware and achieving compliance with regulations like PCI DSS and are a...
On-Demand Webinar
Tackling the CIS: One Control at a Time
Mon, 11/25/2024
The Center for Internet Security (CIS) Critical Security Controls (CSC) are a trusted source of truth in the cybersecurity community. Many organizations implement the CIS CSC framework to ensure their cybersecurity programs are functioning at peak effectiveness. The latest iteration, CIS CSC v8.1, was released earlier this year. In this recorded webinar, Cybersecurity Researcher at Fortra’s...
On-Demand Webinar
Navigating ATT&CK and Your Cybersecurity Posture
Mon, 12/16/2024
window._wq = window._wq || [];
_wq.push({
id: "7u7hb88ylf",
options: {
preload: "auto"
}
});
Are you interested in using the MITRE ATT&CK framework to determine your cybersecurity posture and stop the kill chain in its tracks? Or wondering how to evaluate the effectiveness of your cybersecurity tools? The MITRE ATT&CK framework helps create better...
Blog
Enhancing Security Monitoring with Tripwire's Change Audit: New Rules for Firewalls, WFP, and Microsoft Store Applications
By Andrew Swoboda on Tue, 03/04/2025
What is it?The Tripwire Enterprise Change Audit rules provide customers with the ability to monitor for change events that could have an impact on a system. Monitoring for change events can help administrators identify malicious and/or unexpected changes within their environment.Changes to CAAdditional rules were added to the Change Audit rule set. These rules provide customers the ability to...
Blog
Resolving Top Security Misconfigurations: What You Need to Know
By Jeff Moline on Mon, 01/22/2024
One of the most common factors that can lead to cybersecurity incidents is a security misconfiguration vulnerability in software or application settings. The default settings that come with the implementation of these tools and solutions are often not configured securely, and many organizations do not invest the time and resources into ensuring that...
Blog
10 Mistakes in Cybersecurity and How to Avoid Them
By Katrina Thompson on Mon, 09/11/2023
It's easy to rest on our laurels. Prevent a few breaches – or go long enough without one – and you start to feel invincible. While our efforts are certainly laudable, we can't get too comfortable.As defenders, we always need to be on the hunt for what we've missed and ways to do better. Here are ten common cybersecurity mistakes that crop up (and how...
Blog
3AM Ransomware Attackers Pose as IT Support to Compromise Networks
By Graham Cluley on Fri, 05/23/2025
Cybercriminals are getting smarter. Not by developing new types of malware or exploiting zero-day vulnerabilities, but by simply pretending to be helpful IT support desk workers.Attackers affiliated with the 3AM ransomware group have combined a variety of different techniques to trick targeted employees into helping them break into networks.It works like this.First, a company employee finds their...
Datasheet
NERC CIP Best Practices: The Tripwire Approach
Industrial operators subject to the North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) standard know that achieving compliance is no minor feat, and serious strategic consideration is required to ensure efficient resource use in the compliance process. By meeting NERC CIP compliance, these companies take important steps towards securing their IT/OT...
Datasheet
Why Energy Utilities Can Count on Fortra’s Tripwire
As an energy industry professional, you understand the consequences of subpar protection and the need for reliable, iron-clad security controls. Evaluating new cybersecurity software to protect your energy environment shouldn’t involve guesswork, especially when you are trying to match capabilities to your particular needs. This datasheet provides a quick view of Tripwire’s energy solution. See...